Physical Address
304 North Cardinal St.
Dorchester Center, MA 02124
MS-203 Manage role-based permissions in Microsoft 365 Microsoft Quiz Answers
Get MS-203 Manage role-based permissions in Microsoft 365 Microsoft Quiz Answers
Examines how messaging administrators manage role-based permissions, and how they must plan and configure permissions carefully so as not to put their messaging environment or their entire Active Directory at risk.
This learning path helps prepare you for Exam MS-203: Microsoft 365 Messaging.
Prerequisites:
This module is designed for persons who are aspiring to the Microsoft 365 Messaging Administrator role. The prerequisites for this module include:
- Ability to navigate the Microsoft 365 admin center, the Exchange admin center, and the Microsoft 365 Defender portal
- Ability to create Domain Name System (DNS) records at an intermediate level
- Familiarity with Active Directory concepts such as centralized domain management, sites, and directory-based identity-related services
- Ability to write PowerShell commands at an intermediate level
Module 1: Manage administrator roles
Examines how messaging administrators manage the Role Based Access Control (RBAC) permissions that are used by both Exchange Server and Exchange Online.
Learning objectives:
By the end of this module, you’ll be able to:
- Describe how RBAC is used to assign roles to users.
- Understand management role groups and their administrative tasks.
- Assign the built-in management roles for messaging administration.
- Create custom management roles and assign them through role assignment policies to users.
- Troubleshoot RBAC management roles.
This module is part of these learning paths:
Quiz 1: Explore Role-Based Access Control
Q1. As the Messaging administrator for Contoso, Holly Dickson wants to assign multiple end-user roles to Susie, who’s an end user in the Sales department. What’s the easiest way for Holly to assign multiple end-user roles to Susie?
- Assign a role group that includes multiple roles
- Through a role assignment policy
- By assigning each individual end-user role to Susie
Quiz 2: Examine built-in management role groups
Q1. As the Messaging administrator for Tailspin Toys, Alan Deyoung wants to assign built-in role groups in Exchange to several administrators. However, Alan has discovered that the built-in role groups in Exchange don’t match the job function of these administrators. What should Alan do?
- Assign the built-in role groups to the administrators and then customize the roles assigned to these role groups to meet Tailspin’s requirements
- Create custom role groups and add roles to them
- Create custom roles that meet Tailspin’s requirements and assign the roles to the administrators
Quiz 3: Implement admin roles for management role assignments
Q1. Patti Fernandez is the new Messaging administrator for Lucerne Publishing. After several managers changed jobs, Patti investigated Lucerne’s permission management model. Patti discovered that the previous administrator had assigned roles directly to users. As a result, Patti had to manually reassign those managers’ roles to their replacements. Patti soon realized how inefficient and complex this process was. To avoid this situation in the future, what should Patti do to make it easier to manage role assignments and reduce the complexity of Lucerne’s permission model?
- Create new roles directly from scratch for each manager
- Assign roles to a universal security group (USG)
- Use role groups and role assignment policies to give permissions to users
Quiz 4: Knowledge check
Q1. As the Messaging administrator for Fabrikam, Holly Spencer wants to add and remove permissions to sets of users without having to configure individual mailboxes. What feature of the Exchange permission model will enable Holly to accomplish this goal?
- Assigning multiple role assignment policies to each user mailbox
- Assigning an end-user role to a role assignment policy
- Specifying a predefined relative scope on a management role assignment
Q2. As the Messaging administrator for Contoso, Holly Dickson wants to define the level of impact or influence of a management role when a management role assignment is created. What feature of the RBAC permission model will enable Holly to accomplish this task?
- Management role group
- Role assignment policy
- Management role scopes
Q3. Which of the following role group components links a role to a role group?
- Management role assignment
- Management role scope
- Role assignment policy
Module 2: Manage user roles
Examines how to manage user roles using built-in role assignment policies and management role assignment policies, and how to create new roles, role assignments, and scopes.
Learning objectives:
By the end of this module, you’ll be able to:
- Describe the built-in end-user roles.
- Configure role assignment policies.
- Create new custom roles and role assignment policies.
This module is part of these learning paths:
Quiz 1: Implement user roles for role assignment policies
Q1. Which of the following built-in user roles allows an end user to view and modify basic configuration and access settings for Outlook on the web?
- MyDiagnostics
- MyBaseOptions
- MyProfileInformation
Quiz 2: Create new roles, role assignments, and scopes
Q1. As the Messaging administrator for Fabrikam, Holly Spencer wants to create new user roles and assign them to role assignment policies. How should Holly complete this task?
- Holly must use the Exchange Management Shell
- Holly must use the Exchange admin center (EAC)
- Holly must use the Microsoft 365 Defender portal
Quiz 3: Knowledge check
Q1. As the Messaging admin for Lucerne Publishing, Patti Fernandez wants to create explicit assignment policies. How should Patti create these policies?
- Using the Microsoft 365 Defender portal
- Using the Exchange admin center (EAC)
- Using the Exchange Management Shell (EMS)
Q2. As the Messaging admin for Tailspin Toys, Alan Deyoung is planning the company’s role assignment policies. In doing so, Alan has realized that the default role assignment policy isn’t enough to fulfill all of Tailspin’s business requirements. When this situation occurs, an organization has three options that it can choose from to address the issue. Which of the following items is one of those options?
- Create a new role assignment policy from the built-in roles and assign it to role groups
- Create new end-user roles and add them to role groups
- Add or remove user roles from the default role assignment policy
Q3. As a best practice, what should the default role assignment policy contain?
- The permissions that apply to the organization’s broadest set of users
- The Organization Management role group
- The organization’s default universal security group (USG)
Module 3: Analyze role-based permissions
Examines how a messaging administrator must plan and configure shared permissions and split permissions so as not to put their Exchange environment or their entire Active Directory at risk.
Learning objectives:
By the end of this module, you’ll be able to:
- Identify the differences between shared permissions and split permissions.
- Describe multi-forest permissions.
- Identify the differences between the permission models.
This module is part of these learning paths:
Quiz 1: Explore the use of split permissions
Q1. What’s the highest level of split permissions?
- The separation of Exchange management and Compliance management
- The separation of Active Directory management and Azure Active Directory management
- The separation of Exchange management and Active Directory management
Quiz 2: Explore the differences in permissions
Q1. What’s the first task you must complete to configure RBAC split permissions?
- Create a role group, which will contain the Active Directory administrators that can create security principals
- Disable Active Directory split permissions if it’s enabled
- Create regular and delegating role assignments between the Mail Recipient Creation role and the Recipient Management role group
Quiz 3: Knowledge check
Q1. RBAC applies permissions to all Exchange objects within what type of Exchange forest?
- A Resource forest
- All forests in the same forest topology type
- A single forest
Q2. Which of the following items is a type of multiple forest topologies that Microsoft Exchange Server supports?
- Security forest
- Cross forest
- Active Directory forest
Q3. As the Messaging admin for Fabrikam, Holly Spencer wants to create a mailbox for Patti Fernandez. The mailbox will have Active Directory split permissions enabled. Holly began by creating a user account for Patti using Active Directory tools. What’s the next step that Holly must complete?
- Use the Exchange management tools to mailbox enable Patti’s account
- Configure Exchange permissions on Patti’s account
- Add Patti’s account to the Mail Recipient role
Conclusion:
I hope this MS-203 Manage role-based permissions in Microsoft 365 Microsoft Quiz Answers would be useful for you to learn something new from this problem. If it helped you then don’t forget to bookmark our site for more Coding Solutions.
This Problem is intended for audiences of all experiences who are interested in learning about Data Science in a business context; there are no prerequisites.
Keep Learning!
More Coding Solutions >>
